Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

AVG secure search removal


  • Please log in to reply
1 reply to this topic

#1 jackiegreeno

jackiegreeno

  • Members
  • 148 posts
  • OFFLINE
  •  
  • Local time:08:07 AM

Posted 10 August 2014 - 09:26 AM

I removed AVG and can't get rid of the AVG secure search.  Found a message about it, but didn't work for me.  I tried to remove it through settings, to no avail.  I performed AdwCleaner and it found some things, but not that.  When downloading a convert mp4 to mp3, I must have missed that.  There were like 6 different things that were declined and how this one slid by me is beyond me.   Though the report says it deleted the folder "Reimage"  there is still something left from it in control panel / programs file.  I can find nothing about AVG in the control panel programs file.   Here is the cleaner report:

 

# AdwCleaner v3.304 - Report created 10/08/2014 at 09:43:29
# Updated 08/08/2014 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : Jackie-PC - JACKIE-LENOVO
# Running from : C:\Users\Jackie-PC\Documents\Downloads\AdwCleaner.exe
# Option : Clean
 
***** [ Services ] *****
 
 
***** [ Files / Folders ] *****
 
Folder Deleted : C:\Program Files (x86)\globalUpdate
Folder Deleted : C:\Program Files (x86)\VideoConverter
Folder Deleted : C:\Windows\util
Folder Deleted : C:\Program Files\Reimage
Folder Deleted : C:\Users\Jackie-PC\AppData\Local\globalUpdate
Folder Deleted : C:\Users\Jackie-PC\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\Jackie-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Video Converter
Folder Deleted : C:\Users\Jackie-PC\Documents\Updater
File Deleted : C:\Users\JACKIE~1\AppData\Local\Temp\Uninstall.exe
File Deleted : C:\Users\Jackie-PC\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Video Converter.lnk
File Deleted : C:\Users\Jackie-PC\AppData\Roaming\Mozilla\Firefox\Profiles\yshkenr7.default\searchplugins\avg-secure-search.xml
File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\safeguard-secure-search.xml
 
***** [ Scheduled Tasks ] *****
 
Task Deleted : DSite
Task Deleted : Searchya
 
***** [ Shortcuts ] *****
 
 
***** [ Registry ] *****
 
Key Deleted : HKCU\Software\Classes\pokki
Key Deleted : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Key Deleted : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Key Deleted : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\LatestDLMgr_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\LatestDLMgr_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\strongvaultapp_rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\strongvaultapp_rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\YontooDesktop_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\YontooDesktop_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{03771AEF-400D-4A13-B712-25878EC4A3F5}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{A75BE48D-BF58-4A8B-B96C-F9A09DFB9844}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Key Deleted : HKCU\Software\GlobalUpdate
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKLM\Software\GlobalUpdate
 
***** [ Browsers ] *****
 
-\\ Internet Explorer v11.0.9600.17207
 
 
-\\ Mozilla Firefox v31.0 (x86 en-US)
 
[ File : C:\Users\Jackie\AppData\Roaming\Mozilla\Firefox\Profiles\y3z6o9ax.default\prefs.js ]
 
 
[ File : C:\Users\Jackie-PC\AppData\Roaming\Mozilla\Firefox\Profiles\yshkenr7.default\prefs.js ]
 
 
-\\ Google Chrome v36.0.1985.125
 
[ File : C:\Users\Jackie\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 
[ File : C:\Users\Jackie-PC\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
Deleted [Search Provider] : hxxp://search.conduit.com/Results.aspx?q={searchTerms}&SearchSource=49&CUI=UN31511518211612417&ctid=CT3289847&UM=2
Deleted [Search Provider] : hxxp://websearch.ask.com/redirect?client=cr&src=kw&tb=ORJ&o=&locale=&apn_uid=7015D450-2DBC-46EF-B2AC-9ECA3D82373C&apn_ptnrs=TV&apn_sauid=E20D5873-301B-447E-8AD3-B187DC4D0EF4&apn_dtid=OSJ000YYUS&q={searchTerms}
Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}
Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
Deleted [Extension] : eooncjejnppfjjklapaamhcdmjbilmde
 
*************************
 
AdwCleaner[R0].txt - [4269 octets] - [15/04/2014 16:41:18]
AdwCleaner[R1].txt - [4230 octets] - [10/08/2014 09:39:04]
AdwCleaner[S0].txt - [4377 octets] - [15/04/2014 16:43:15]
AdwCleaner[S1].txt - [4702 octets] - [10/08/2014 09:43:29]
 
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [4762 octets] ##########
 

 

Assistance please


Edited by hamluis, 10 August 2014 - 12:56 PM.
Moved from Win 7 to Am I Infected - Hamluis.


BC AdBot (Login to Remove)

 


#2 buddy215

buddy215

  • Moderator
  • 13,101 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:07:07 AM

Posted 10 August 2014 - 09:54 AM

Other programs you can use to remove adware:

Malwarebytes Anti-Malware Free

Junkware Removal Tool Download

Free Virus Scan | Online Virus Scanner from ESET

 

Revo Uninstaller is very good at removing the remnants of programs left after uninstalling.

Download Revo Uninstaller Freeware - Free and Full Download - Uninstall software, remove programs, solve uninstall problems

 

Use CCleaner to cleanup the temporary files, logs, ad cookies, etc. Use the default settings. Pay close attention during install

and UNcheck any offers toolbars, etc. CCleaner - PC Optimization and Cleaning - Free Download

 

You can reset Chrome: Reset browser settings - Chrome Help

  1. Click the Chrome menu on the browser toolbar.
  2. Select Settings.
  3. Click Show advanced settings and find the "Reset browser settings” section.
  4. Click Reset browser settings.
  5. In the dialog that appears, click Reset. Note: When the "Help make Google Chrome better by reporting the current settings" checkbox is selected you are anonymously sending Google your Chrome settings. Reporting these settings allows us to analyze trends and work to prevent future unwanted settings changes.

Resetting your browser settings will impact the settings below:

Click on the dropdown arrow in the Firefox search engine box and delete all but your preferred search engine.

Check in Add-ons for unknown or add-ons not installed by you...extensions, plugins...and disable or uninstall.


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users